andy nguyen vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91.

Gnome Evince

7.8

CVSSv3

Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in...

Gnome Evince 3.26.0 Canonical Ubuntu Linux 16.04 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Opensuse Leap 15.0 Opensuse Leap 15.1

5.5

CVSSv3

The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince up to and including 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files.

8.8

CVSSv3

Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Linux Linux Kernel 5.9.0 Linux Linux Kernel Linux Linux Kernel 5.9.1

1 Github repository

6.5

CVSSv3

Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.

Linux Linux Kernel

7.8

CVSSv3

Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access.

2 Github repositories1 Article

7.2

CVSSv3

A flaw was found in the HDLC_PPP module of the Linux kernel in versions prior to 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest thr...

Linux Linux Kernel 5.9.0 Linux Linux Kernel Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Opensuse Leap 15.1 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Opensuse Leap 15.2 Netapp H410c Firmware -Starwindsoftware Starwind Virtual San V8

7.5

CVSSv3

A flaw was found in the Linux kernel in versions prior to 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic...

Linux Linux Kernel Linux Linux Kernel 5.9.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Solidfire \\& Hci Management Node -Netapp Solidfire \\& Hci Storage Node -Opensuse Leap 15.1 Opensuse Leap 15.2 Netapp Hci Compute Node Bios -Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04

5.5

CVSSv3

A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker with user privilege to trigger a Denial of Service threat.

Linux Linux Kernel Linux Linux Kernel 6.2

7

CVSSv3

A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. In this flaw, a call to btsdio_remove with an unfinished job, may cause a race problem leading to a UAF on hdev devices.

Linux Linux Kernel Netapp H300s -Netapp H500s -Netapp H700s -Netapp H410s -Netapp H410c -Debian Debian Linux 10.0 Debian Debian Linux 12.0

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook